Repository navigation
Fix/code scanning alerts - #180
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the
 |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
- electron rest proxy: normalise the upstream path, drop __proto__ headers - desktop app protocol: BaaS relay refuses targets off the configured origin - curl downloads (scripts, Dockerfiles): HTTPS-only (--proto '=https' --tlsv1.2) - ide-sandbox: npm install -g --ignore-scripts - vault42-recover-dumps: sha256sum instead of md5sum for tree comparison - smoke tests: message origin check; os.tmpdir() instead of /tmp - justified NOSONAR on genuine false positives (seeded demo RNG, egress deny-lists, local-network http, demo seed credentials, maintainer CLIs)
- every third-party action pinned to its commit SHA (tag kept as comment) - npm ci --ignore-scripts where lifecycle scripts are not needed - HTTPS-only curl downloads; govulncheck pinned instead of @latest
81e9eb7 to
cbea2b6
Compare
… CHECKs
p5_erase_canary failed on both fresh and legacy: generic p5_insert could not satisfy
ai_context_items_kind_check (IN without ::text casts) or osionos_page_comments_decided_check.
Widen p5_literal to match plain IN ('a','b') and force valid kind/scope/slug/body values
plus NULL decided_* columns.
… emoji decided_check requires (status=open) iff both decided_* are null. When the canary seeds decided_by as the user column, force status=accepted and decided_at=now(). Reactions emoji CHECK is char_length 1..16; force a short literal.
|
No description provided.